AWS cli documentation change

Service: cli · 2026-07-01 · Documentation low

File: cli/latest/reference/datazone/create-connection.md

Summary

Added Snowflake connection properties to AWS DataZone create-connection command documentation, including connectivity configurations, authentication methods, role mappings, and lineage sync settings.

Security assessment

The change introduces documentation for Snowflake connection properties including authentication configurations (OAuth2, basic auth), secret management (secretArn), encryption (kmsKeyArn), network security (securityGroupIdList, subnet configurations), and credential validation. While these are security features, there's no evidence this change addresses a specific security vulnerability or incident.

Diff

diff --git a/cli/latest/reference/datazone/create-connection.md b/cli/latest/reference/datazone/create-connection.md
index 6ddc9f212..201a434c4 100644
--- a//cli/latest/reference/datazone/create-connection.md
+++ b//cli/latest/reference/datazone/create-connection.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »
@@ -277 +277 @@ JSON Syntax:
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`, `vpcProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `snowflakeProperties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`, `vpcProperties`.
@@ -1132,0 +1133,565 @@ JSON Syntax:
+> 
+> snowflakeProperties -> (structure)
+>
+>> The Snowflake-specific connection properties to use when creating the connection.
+>> 
+>> connectivityProperties -> (structure)
+>>
+>>> The connectivity properties of the Snowflake connection.
+>>> 
+>>> connectionProperties -> (map)
+>>>
+>>>> The connection properties for this configuration.
+>>>> 
+>>>> key -> (string)
+>>>> 
+>>>> value -> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>> 
+
+>>> 
+>>> physicalConnectionRequirements -> (structure)
+>>>
+>>>> The physical network requirements for the connection, such as the subnet, security group, and VPC settings needed to reach the data source.
+>>>> 
+>>>> subnetId -> (string)
+>>>>
+>>>>> The subnet ID of the physical connection requirements of a connection.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `32`
+>>>>>   * pattern: `subnet-[a-z0-9]+`
+>>>>> 
+
+>>>> 
+>>>> subnetIdList -> (list)
+>>>>
+>>>>> The subnet ID list of the physical connection requirements of a connection.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `50`
+>>>>> 
+
+>>>>> 
+>>>>> (string)
+>>>>>
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `0`
+>>>>>>   * max: `32`
+>>>>>>   * pattern: `subnet-[a-z0-9]+`
+>>>>>> 
+
+>>>> 
+>>>> securityGroupIdList -> (list)
+>>>>
+>>>>> The group ID list of the physical connection requirements of a connection.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `50`
+>>>>> 
+
+>>>>> 
+>>>>> (string)
+>>>>>
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>>   * max: `255`
+>>>>>> 
+
+>>>> 
+>>>> availabilityZone -> (string)
+>>>>
+>>>>> The availability zone of the physical connection requirements of a connection.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `255`
+>>>>> 
+
+>>> 
+>>> name -> (string)
+>>>
+>>>> The name of the connectivity configuration.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `41`
+>>>>   * pattern: `[\u0020-\uD7FF\uE000-\uFFFF\t]*`
+>>>> 
+
+>>> 
+>>> description -> (string)
+>>>
+>>>> The description of the connectivity configuration.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `[\u0020-\uD7FF\uE000-\uFFFF\r\n\t]*`
+>>>> 
+
+>>> 
+>>> validateCredentials -> (boolean)
+>>>
+>>>> Specifies whether to validate credentials for the connectivity configuration. Defaults to true if not specified.
+>>> 
+>>> validateForComputeEnvironments -> (list)
+>>>
+>>>> The compute environments to use when validating connectivity. The service validates that the connection is reachable from each specified environment.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `50`
+>>>> 
+
+>>>> 
+>>>> (string)
+>>>>
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `SPARK`
+>>>>>   * `ATHENA`
+>>>>>   * `PYTHON`
+>>>>> 
+
+>>> 
+>>> sparkProperties -> (map)
+>>>
+>>>> The Spark properties for this configuration.
+>>>> 
+>>>> key -> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `128`
+>>>>> 
+
+>>>> 
+>>>> value -> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>> 
+
+>>> 
+>>> athenaProperties -> (map)
+>>>
+>>>> The Athena properties for this configuration.
+>>>> 
+>>>> key -> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `128`
+>>>>> 
+
+>>>> 
+>>>> value -> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>> 
+
+>>> 
+>>> pythonProperties -> (map)
+>>>
+>>>> The Python properties for this configuration.
+>>>>